Repository navigation
http-cache-semantics vulnerable to Regular Expression Denial of Service #2856
Description
Related to #2849
Related to #2850
http-cache-semantics vulnerable to Regular Expression Denial of Service:
Node-gyp v9.3.1 uses "make-fetch-happen": "^10.0.3" which in turn uses "http-cache-semantics": "4.1.0" we need "http-cache-semantics": "^4.1.1" to fix http-cache-semantics vulnerable to Regular Expression Denial of Service
Activity
lukekarrys commentedon Oct 27, 2023
make-fetch-happen@10useshttp-cache-semantics@^4.1.0so updating your dependencies will update to a non-vulnerable version of that.